Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
scriptjunkie (sj@social.scriptjunkie.us)'s status on Sunday, 02-Aug-2026 10:43:48 JST scriptjunkie

"The real bug is a pre-auth on screensharingd and it allows to pwn any Mac that has Screen Sharing enabled, without knowing password or anything else. You just need to have an IP address :-)"
https://reverse.put.as/2026/07/29/its-a-pre-auth-stupid/
In conversation about 14 days ago from social.scriptjunkie.us permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  It's a pre-auth, stupid!
  
  from fG!
  
  This Monday Apple’s Security Bulletin finally brought the bad news I had been waiting for a long time (because I’m a very curious person and like to experiment!). There was a section on Screen Sharing and while the descriptions looked suspicious there was a chance that one of the greatest bugs I ever found was finally killed. After updating a VM and testing the bug, it was indeed not working anymore.

Feeds